Separation of Duties

5 minutes 5 Questions

Separation of Duties (SoD) is a security principle that divides a critical or sensitive task among multiple individuals to prevent fraud or unauthorized activities. SoD reduces the risk of a single individual having too much control, access, or influence within a system or process, which could lead…

Test mode:

Exam (Timed)

Practice (With explanations)

Start practice test

Question 1

A financial company employee processes transactions and checks account balances. The company wants to implement separation of duties. What is the most secure solution?

Let all employees have joint responsibility for the process Split the tasks between two employees - one processes transactions and another checks account balances Allow only the employee's manager to check account balances Bring in a third-party monitor to check account balances

Correct Answer: Split the tasks between two employees - one processes transactions and another checks account balances

By splitting the tasks between two employees, the responsibilities for processing transactions and verifying account balances are separated, decreasing the likelihood of fraud or collusion.

Question 2

A network administrator manages the users, creates accounts and assigns permissions. The company decides to enforce the separation of duties. Which solution is best suited?

Assign all tasks to the system administrator Allow the network administrator to manage permissions but not create accounts Allow the network administrator to create accounts but not manage permissions Assign the task of creating accounts to HR and managing permissions to the IT manager

Correct Answer: Assign the task of creating accounts to HR and managing permissions to the IT manager

The goal is to separate critical tasks to prevent collusion and fraud. By assigning account creation to HR and permission management to the IT manager, no single person has complete control over the entire process.

Question 3

A payroll team member is responsible for processing payments in a small organization. How should separation of duties be implemented?

Have two employees jointly initiate the payroll process and approve payments Outsource some of the payroll tasks to a third-party provider Divide tasks between employees who initiate the payroll process and those who approve and distribute funds Allow the employee to process all payments, but assign a supervisor to randomly check transactions

Correct Answer: Divide tasks between employees who initiate the payroll process and those who approve and distribute funds

By dividing tasks between those who initiate the payroll process and those who approve and distribute funds, separation of duties is achieved, reducing the risk of mismanagement or fraud.

Join the Elite: Pass Your CISSP

4,400+ questions across all 8 CBK domains

Separation of Duties

Guide: Understanding Separation of Duties Concept - CISSP Access Control

CISSP - Separation of Duties Example Questions

Question 1

Question 2

Question 3

Join the Elite: Pass Your CISSP